495 citations · 752 across the 7 of their papers we have counts for
4 papers · 1 filter
Classifying Sequences of Extreme Length with Constant Memory Applied to Malware Detection
Edward Raff, William Fleshman, Richard Zak +3
Recent works within machine learning have been tackling inputs of ever-increasing size, with cybersecurity presenting sequence classification problems of particularly extreme lengt…
Getting Passive Aggressive About False Positives: Patching Deployed Malware Detectors
Edward Raff, Bobby Filar, James Holt
False positives (FPs) have been an issue of extreme importance for anti-virus (AV) systems for decades. As more security vendors turn to machine learning, alert deluge has hit crit…
Automatic Yara Rule Generation Using Biclustering
Edward Raff, Richard Zak, Gary Lopez Munoz +5
Yara rules are a ubiquitous tool among cybersecurity practitioners and analysts. Developing high-quality Yara rules to detect a malware family of interest can be labor- and time-in…
ProblemChild: Discovering Anomalous Patterns based on Parent-Child Process Relationships
Bobby Filar, David French
It is becoming more common that adversary attacks consist of more than a standalone executable or script. Often, evidence of an attack includes conspicuous process heritage that ma…